lan_if="lan0"
wan_if="bge2"
# loading rules from files would be tricky without it
# might actually re-enable it later
set require-order no
# actually load all the rules